Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2026-58005

Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Altera

Description

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Altera Trusted Firmware

Default version status: unaffected

  • 0 to ≤ socfpga_v2.14.0affected

References